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WHAT IS CLAIMED IS: 

1. A method of authorizing access to restricted information on a data processing network, 
comprising: 

responsive to receiving a request for a document, determining whether access to the 
document is restricted; 

responsive to determining that access to the requested document is restricted, providing at 
least one password document comprising a plurality of icons to a user for selection by the 
user; 

detecting a user's selection of one or more icons from the at least one password 
documents and, based thereon, determining the user's authority to access the requested 
documents. 

2. The method of claim 1, wherein providing at least one password document comprises 
providing a series of password documents to the user, each password document comprising a 
plurality of icons and prompting the user to select one of the icons from each of the password 
documents. 

3. The method of claim 2, wherein a correct icon on each password document comprises a link 
to a next password document such that selecting an appropriate sequence of icons produces a 
corresponding sequence of documents. 

4. The method of claim 1, wherein determining the user's authority to access a requested 
document comprises comparing the sequence of selected icons to a previously stored sequence 
and granting authority if the selected sequence matches the previously stored sequence. 
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5. The method of claim 1, further comprising, reading user identification information provided 
with the request and determining authority to access the requested document based on the 
selected icons and the user identification information. 

6. The method of claim 5, wherein the user identification information is provided as a cookie 
portion of the request. 

7. The method of claim 5, wherein the user is provided read only access authority to the 
requested document if the user identification information matches previously stored user 
identification information. 

8. A computer program product comprising a set of computer executable instructions for 
authorizing access to restricted information on a data processing network, the instruction stored 
on a computer readable medium, comprising: 

computer code means for determining whether access to the document is restricted 
responsive to receiving a request for a document; 

computer code means responsive to determining that access to the requested document is 
restricted for providing at least one password document comprising a plurality of icons to 
a user for selection by the user; 

computer code means for detecting a user's selection of one or . more icons from the at 
least one password documents and, based thereon, determining the user's authority to 
access the requested documents. 

9. The computer program product of claim 8, wherein the code means for providing at least one 
password document comprises code means for providing a series of password documents to the 
user, each password document comprising a plurality of icons and code means for prompting the 
user to select one of the icons from each of the password documents. 
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10. The computer program product of claim 9, wherein a correct icon on each password 
document comprises a link to a next password document such that selecting an appropriate 
sequence of icons produces a corresponding sequence of documents. 

11. The computer program product of claim 8, wherein the code means for determining the 
user's authority to access a requested document comprises code means for comparing the 
sequence of selected icons to a previously stored sequence and granting authority if the selected 
sequence matches the previously stored sequence. 

12. The computer program product of claim 8, further comprising, computer code means for 
reading user identification information provided with the request and determining authority to 
access the requested document based on the selected icons and the user identification 
information. 

13. The computer program product of claim 12, wherein the user identification information is 
provided as a cookie portion of the request. 

14. The computer program product of claim 12, wherein the user is provided read only access 
authority to the requested document if the user identification information matches previously 
stored user identification information. 

15. A data processing system including processor, memory, and input means connected via a 
bus, the memory containing at least a portion of a computer program product comprising a set of 
computer executable instructions for authorizing access to restricted information on a data 
processing network, the instruction stored on a computer readable medium, comprising: 

computer code means for determining whether access to the document is restricted 
responsive to receiving a request for a document; 
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computer code means responsive to determining that access to the requested document is 
restricted for providing at least one password document comprising a plurality of icons to 
a user for selection by the user; 

computer code means for detecting a user's selection of one or more icons from the at 
least one password documents and, based thereon, determining the user's authority to 
access the requested documents. 

16. The data processing system of claim 15, wherein the code means for providing at least one 
password document comprises code means for providing a series of password documents to the 
user, each password document comprising a plurality of icons and code means for prompting the 
user to select one of the icons from each of the password documents. 

17. The data processing system of claim 16, wherein a correct icon on each password document 
comprises a link to a next password document such that selecting an appropriate sequence of 
icons produces a corresponding sequence of documents. 

18. The data processing system of claim 15, wherein the code means for determining the user's 
authority to access a requested document comprises code means for comparing the sequence of 
selected icons to a previously stored sequence and granting authority if the selected sequence 
matches the previously stored sequence. 

19. The data processing system of claim 15, further comprising, computer code means for 
reading user identification information provided with the request and determining authority to 
access the requested document based on the selected icons and the user identification 
information. 

20. The data processing system of claim 19, wherein the user identification information is 
provided as a cookie portion of the request. 
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21. The data processing system of claim 19, wherein the user is provided read only access 
authority to the requested document if the user identification information matches previously 
stored user identification information. 



